Solarwinds Authentication with Common DoD Smart card and Common Access Card CAC Product Support

I have followed the 2020 h2 setup guide for smart card authentication. I have tried all support pages, changing authentications settings, and nothing seems to work. Solarwinds says talk with server admins instead helping me with a way forward. When i follow all the steps correctly and try to authenticate with cac, it acts like it authenticates and then it has a good url but it gives me a blank white page with nothing on it. Does anyone have any helpful ideas on how to fix this?

I have followed the 2020 h2 setup guide for smart card authentication. I have tried all support pages, changing authentications settings, and nothing seems to work. Solarwinds says talk with server admins instead helping me with a way forward. When i follow all the steps correctly and try to authenticate with cac, it acts like it authenticates and then it has a good url but it gives me a blank white page with nothing on it. Does anyone have any helpful ideas on how to fix this?

IIS feature changes:

• Security changed (1 of 9) to (4 of 9)

• Client Certificate Mapping Authentication
• IIS Client Certificate Mapping Authentication
• Windows Authentication

IIS changes

• IIS
  • Authentication (post SolarWinds installation change and after first logon) (Required for PKI and SSO)
    • Enable Active Directory Client Certificate for Authentication
    • Disable Anonymous Authentication
    • Enable Windows Authentication
• Management
  • Configuration Editor: after cert should be:
    • Section: webServer/security/access
    • Deepest Path: MACHINE/WEBROOT/APPHOST
    • sslFlags: Ssl,SslNegotiateCert,SslRequireCert,Ssl128
  • Feature Delegation: No changes
  • Shared Configuration: No changes.

Run the permission checker

We also delete the default web page.

These settings I think are a little different then the SolarWinds documentation.

Thank you, I tried this but it still did not work, its a blank white page after it loads from selecting my cac to authenticate.

Check your IIS filtering. Depending what Alphabet soup you come from your default build may have some of these blocked.

IIS handler mapping requirements (solarwinds.com)

I am sure you tried the good ole reboot.

Also Forms  and anonymous authentication need to be off in IIS. Global if there but definitely at the site level.  This is contrary to their documentation, none the less at least in my environment it wont work with those on.

I went through several upgrade notes over the pass few years and these are the things that got me.

Sorry for the late response, yes i have rebooted multiple times. I have done iis handler mappings as well and it is still not working, i have even tried a new cert. its just always a blank white page after authenticating and solarwinds is no longer helping me because i have done all of their troubleshooting steps

tmcurry said:

Management

• Configuration Editor: after cert should be:
  • Section: webServer/security/access
  • Deepest Path: MACHINE/WEBROOT/APPHOST
  • sslFlags: Ssl,SslNegotiateCert,SslRequireCert,Ssl128
• Feature Delegation: No changes
• Shared Configuration: No changes.

Can you explain this part more, please? I was able to follow the rest, but I'm confused where is this section? Thanks.

Did you ever solve this if so can you share?

I did not, I honestly tried everything so we just took the hit on our inspection

after the 2020.2.6 upgrade I have 1 site that just stopped working. All the other upgraded sites work fine.

I think we are on that version also, i can check tomorrow and let you know

any news